[gptalk] Re: Prevent access to USB disks and portable media drives
- From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Tue, 8 Jul 2008 16:40:42 -0700
Ben-
I think what you will likely have to do is plug in a USB mass store device
into the system that you are setting policy on and look under the USB
Controllers within the device browser. The one thing I'm not sure about is
how GP Preferences stores those device definitions. If they are stored by
device class (meaning all USB mass storage devices) or by a specific ID
(meaning that it only applies to the one you've plugged in). I think its
probably worth testing that.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of WATSON, BEN
Sent: Tuesday, July 08, 2008 2:44 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Prevent access to USB disks and portable media drives
Hi Darren,
I built up a Vista machine just for managing the preferences and used an XP
box with the extensions installed to test this and it worked perfect for
disabling access to the Floppy and CD/DVD drives.
However I'm having difficulty trying to determine where I would go to
prevent the users from plugging in USB hard drives and flash drives? If I
could just get this one last piece to work, then this would satisfy the
customer. Any suggestions?
~Ben
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Tuesday, July 08, 2008 10:28 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Prevent access to USB disks and portable media drives
Yes, but perfectly accessible from those lower-level platforms. Check this
out: http://sdmsoftware.com/blog/2008/03/managing_group_policy_preferen.html
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of WATSON, BEN
Sent: Tuesday, July 08, 2008 10:23 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Prevent access to USB disks and portable media drives
Hi Darren,
Are group policy preferences something new provided by Windows Server 2008?
I'm not familiar with them, or I've been completely ignorant of them in
Windows Server 2003 unfortunately.
This is indeed a Windows Server 2003 R2 domain with Windows XP clients.
~Ben
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Tuesday, July 08, 2008 10:22 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Prevent access to USB disks and portable media drives
Ben-
Assuming these are not Vista-based systems (Vista provides this kind of
restriction capability out of the box in GP) then you can use GP Preferences
to restrict access to storage devices like these.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of WATSON, BEN
Sent: Tuesday, July 08, 2008 10:17 AM
To: undisclosed-recipients:
Subject: [gptalk] Prevent access to USB disks and portable media drives
I have a requirement by a customer to prevent users from being able to use
USB disks on their workstations as well as preventing access to any floppy
drives, CD/DVD drives, etc. However, there will be a couple privileged
users who will need to retain access to these devices.
I found a great article with a pre-built ADM template, however it is a
computer based policy, and I require a user based policy.
Is anyone aware of a way to accomplish these using user-based policies?
Thanks,
~Ben
Other related posts:
